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Abstract. We define a Carmichael number of order m to be a com- 
posite integer n such that nth-power raising defines an endomorphism 
of every Z/nZ-algebra that can be generated as a Z/nZ-module by m 
elements. We give a simple criterion to determine whether a number 
is a Carmichael number of order m, and we give a heuristic argument 
(based on an argument of Erdos for the usual Carmichael numbers) that 
indicates that for every m there should be infinitely many Carmichael 
numbers of order m. The argument suggests a method for finding exam- 
ples of higher-order Carmichael numbers; we use the method to provide 
examples of Carmichael numbers of order 2. 



1. Introduction 

A Carmichael number is denned to be a positive composite integer n that 
is a Fermat pseudoprime to every base; that is, a composite n is a Carmichael 
number if a n = a mod n for every integer a. Clearly one can generalize the 
idea of a Carmichael number by allowing the pseudoprimality test in the 
definition to vary over some larger class of tests (perhaps including some 
of those found in Q, §, §, §, §, @, Q, @, g§, §§), and indeed 



such generalizations have been considered (see for example ||, ||, [13], [15], 
0, & & @, H|, H). But there is also a natural algebraic way 
of generalizing the concept of a Carmichael number that makes no mention 
of pseudoprimality. To motivate the definition we note that (1) an integer 
n > 1 is prime if and only if rath-power raising is an endomorphism of 
every Z/nZ-algebra, and (2) a positive composite integer n is a Carmichael 
number if and only if rath-power raising is an endomorphism of Z/nZ. So 
if m is a positive integer, we define a Carmichael number of order m to 
be a positive composite integer n such that the function x i— > x n defines 
an endomorphism of every Z/nZ-algebra that can be generated as a Z/nZ- 
module by m elements. 

Although our definition does not explicitly mention pseudoprimality, a 
Carmichael number n of order m will pass many reasonable pseudoprimality 
tests. For example, if a is an algebraic integer of degree d with d < m, then 
we have TrQ( Q ,)/Q(a n ) = TrQ( a ) /q (a) mod n, so n will pass a Dickson-like 
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pseudoprimality test based on the recurrence sequence of order d consisting 
of the traces of the powers of a. Also, n will pass the "Frobenius step" 
of the Frobenius pseudoprime test of Grantham || with respect to every 
polynomial of degree at most m. 

We will prove the following theorem, which provides a characterization of 
the Carmichael numbers of order m that generalizes Korselt's criterion 12] 
for the usual Carmichael numbers: 



Theorem 1. Let m and n be positive integers with n composite. The fol- 
lowing statements are equivalent: 

(a) n is a Carmichael number of order m; 

(b) the function x i— > x n defines an endomorphism of every finite etale 
Z/raZ- algebra that can be generated as a Z/nZ-module by m elements; 

(c) the following two conditions hold: 

(i) n is squarefree; 

(ii) for every prime divisor p of n and for every integer r with 1 < r < 
m, there is an integer i > such that n = p % mod {p r — 1). 

(For the benefit of those readers unfamiliar with finite etale -R-algebras, 
we present a definition equivalent to the usual one (found for example in 
Section 1.3 of |l4j]) that is applicable when R is a finite product of local 
rings. First suppose that R is itself a local ring — that is, a ring with 
a unique maximal ideal. Then an i?-algebra S is finite etale if it is free of 
finite rank as an i?-module and if for some (or equivalently, every) i?-module 
basis {ei, . . . , e n } of S, the determinant of the n-by-n matrix [Tr s / n(eiej)] 
is a unit of R; here Tr^/^ is the trace map from S to R. Now suppose 
R = R\ x • • • x R m , where the Ri are local. Then an i?-algebra S is finite 
etale if it is of the form S = Si X • • • x S m , where each Si is a finite etale 
i?j-algebra. (Note that the zero ring is a finite etale i?j-algebra, so some of 
the Si may be zero.) Since every finite ring is a finite product of local rings, 
our definition can be used when R is finite. We see, for example, that if 
n is a squarefree integer then a finite etale Z/nZ-algebra is simply a finite 
product of finite fields, each of whose characteristics divides n.) 

Theorem |l| allows us to formulate a heuristic argument (based on an ar- 
gument of Erdos [f?J for the usual Carmichael numbers, and similar to an 
argument of Pomerance [^4|] for the Baillie-PSW pseudoprimes) that indi- 
cates that for every m there should be infinitely many Carmichael numbers 
of order m. The heuristics suggest a method of searching for higher-order 
Carmichael numbers; we implement this method for the case m = 2 and find 
many examples, some of which we present below. In fact, the numbers n 
produced by our argument have the property that nth-power raising is the 
identity on every finite etale Z / nZ-algebra that can be generated as a mod- 
ule by m elements. We call such n rigid Carmichael numbers of order m, 
and in Section |E| we show by example that not all higher-order Carmichael 
numbers are rigid. 
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We would like to replace the heuristic arguments of this paper with ac- 
tual proofs, but that seems to be difficult; we have been unable to adapt 
the argument of Alford, Granville, and Pomerance || for the infinitude of 
the usual Carmichael numbers to the case of higher-order Carmichael num- 
bers. However, in a recent paper pC[] , Hsu proves that there are infinitely 
many "Carmichael polynomials", which are Drinfeld module analogues of 
Carmichael numbers and higher-order Carmichael numbers. 

We know of only one example of a higher-order Carmichael number other 
than the ones produced by the computations described in this paper: one 
finds the number 17 • 31 • 41 • 43 • 89 • 97 • 167 • 331, which is a rigid Carmichael 
number of order 2, on the list of the Carmichael numbers less than 10 16 that 



was computed by Richard Pinch (see [22|, 231 ) 
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Conventions . We subscribe to the conventions that rings have identity ele- 
ments and that ring homomorphisms R — > S take the identity of R to the 
identity of S. 

2. Proof of the Theorem 
The implication (a) =4* (b) is trivial. 

Suppose that condition (b) holds. The ring Z/nZ is a finite etale algebra 
over itself and is generated by a single element as a module over itself, so 
x i— * x n must be an endomorphism of this ring. The only endomorphism 
of Z/raZ is the identity, so we have x = x 11 for all x in Z/nZ. But if n 
were divisible by the square of a prime p we would have p n ^ p mod n, a 
contradiction. Thus n is squarefree. 

Let p be a prime divisor of n and let r be an integer with 1 < r < m. Let F 
be the finite field with p r elements. The field F is a finite etale Z /pZ-algebra, 
and so is also a finite etale Z/nZ-algebra via the projection Z/nZ — > Z/pZ. 
It is clear that F can be generated as a Z/nZ-module by m elements, so 
nth-power raising is an automorphism of F. Every automorphism of F is of 
the form x i— ► x v% for some i, so there is an integer i such that x n = x pl for 
every x £ F. Since the multiplicative group of F is cyclic of order p r — 1, 
we see that n = p l mod {p r — 1). This proves the implication (b) (c). 

Now suppose that condition (c) holds. First we prove the following state- 
ment: 

Lemma 2. If r is an integer with 1 < r < m then (") = mod n. 

Proof. Note that the statement we are to prove is equivalent to the state- 
ment that all prime divisors of n are greater than m. Suppose, to obtain 
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a contradiction, that n had a prime divisor q with q < m. Since n is as- 
sumed to be composite and squarefree, n must have another prime divisor 
p ^ q. If we apply statement (c) (ii) of the theorem with r = q — 1, we 
find that n = p l mod (p q ~ l — 1), and since q divides p q ~ x — 1 it follows that 
n = p 1 mod q. But q \ n, so we find that g | p 1 , a contradiction. □ 

Now suppose R is a Z/nZ-algebra that can be generated as a module 
by to elements. Then R is a finite ring, and so is a product of finite local 
rings Ri, each of which is a Z/nZ-algebra that can be generated as a Z/nZ- 
module by m elements. If nth-power raising is an endomorphism of each Ri, 
then it is an endomorphism of R as well, so it suffices to consider the case 
where R is local. Since n is squarefree, there is a prime divisor p of n such 
that pR = 0, so that R is an F p -algebra. Let p be the maximal ideal of R 
and let k = R/p. Since it! can be generated by m elements as an F p -module, 
we see that [k : F p ] < to and that p m = 0. Since k is separable over F p , 
Hensel's lemma shows that there is a homomorphism k —* R compatible 
with the reduction map R — > k; we view A; as a subring of R via this map. 
We find that every element of R may be written in a unique way as a sum 
a + z where a £ k and z £ p. 

If a € and z £ p, then we have 



n 



(a + z) ^ 

■r=0 

where the second equality is obtained from the facts that z r = when r > to 
and (") = in R when 1 < r < m. But since n = p % mod (p[ fc:F pl — 1) we 
see that (a + z) n = a p% , so nth-power raising on R is simply the reduction 
map to k followed by the automorphism x \—* x v% followed by the lifting 
map k — > R. In particular, nth-power raising is a homomorphism. Thus, n 
is a Carmichael number of order to. This shows that (c) implies (a), and 
completes the proof of the theorem. 

3. A CONSTRUCTION AND HEURISTICS 

Let to > be given. In this section we will give a construction that 
associates to every positive integer L a (possibly empty) set C(m,L) of 
Carmichael numbers of order to. We will also give a heuristic argument that 
indicates that one should be able to find values of L that will make #C(m, L) 
as large as one pleases. The construction and argument generalize those 
of Erdos Q for the usual Carmichael numbers; Pomerance uses a similar 



argument in [24] to show that there should be infinitely many Baillie-PSW 
pseudoprimes. 

First, the construction. Let P(m, L) be the set of prime numbers p that 
do not divide L and that have the property that for every positive integer 
r < to, the integer p r — 1 divides L. Let C(to, L) be the set of squarefree 
integers n > 1 that are congruent to 1 modulo L and whose prime divisors 
all lie in P(m,L). We claim that the elements of C(m,L) are Carmichael 
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numbers of order to. For suppose n £ C(m, L), suppose r is an integer with 
1 < r < to, and suppose p is a prime divisor of n. Then p r — 1 divides L, 
and L divides n — 1, so n = p° mod (p r — 1). By Theorem |lj, the integer n 
is a Carmichael number of order to. 

Our heuristic argument for the existence of L for which #C(m, L) is large 
depends on the following assumption (in addition to the usual assumptions 
and approximations made in such arguments): 

Assumption. Suppose f is an element ofZ[x] and e is a positive real. Then 
there is a positive integrable function s from [1, 1 + e] to R such that for y 
sufficiently large and for every u £ [1, 1 + e] there are at least y u s(u) integers 
x in [l,y u ] such that f{x) is y-smooth. 

Let e > be fixed for the remainder of the argument. Let y be given, let / 
be the least common multiple of the polynomials x r — 1 for 1 < r < m, and let 
L be the least common multiple of the prime powers p e such that p < y and 
p e < y m ( 1+<E ). We will argue that one should expect log f£C(m,L) y 1+e / 2 . 

Let us estimate the cardinality of the set S(y,e) of primes q between y 
and y l+e such that /(g) is y-smooth. By our assumption above, there is 
a positive integrable function s such that the probability that a randomly- 
chosen integer x less than y u has f{x) being y-smooth is at least s{u). Thus 
we expect that the probability that a randomly-chosen integer x near y u 
has f{x) being y-smooth is also at least s(u), so it seems reasonable to 
approximate a lower bound for #5(y, e) by 

s(logx/logy)- dx. 

\ogx 

By setting u = log x / log y we convert this last integral to 

Ji u 

Thus we expect that 

#5(y,c) > ^y" du > y^/ 2 f 1+t S M du . 

Let c e denote the rightmost integral, which is nonzero because s is positive. 

Suppose q is an element of S(y, e) and let r be an integer with 1 < r < m. 
Since f{q) is y-smooth, we see that all of the prime factors of q r — 1 are less 
than y. Suppose p is a prime divisor of q r — 1 and suppose p e is the largest 
power of p that divides q r — 1. Then certainly p e < q r — 1 < q m < y m ( 1+<E ), 
so p e divides L. It follows that q r — 1 divides L. Thus S(y, e) is contained 
in P(m,L), and #P(m,L) > c e y 1+e / 2 . 

Consider the map from the power set of P(m,L) to (Z/LZ)* defined 
by sending a subset of P(m, L) to the residue modulo L of the product of 
its elements. It seems reasonable to assume that the elements of (Z/LZ)* 
will each have roughly the same number of preimages in the power set of 
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P(m, L), so we expect that there should be roug hly 2 #p ( m ' L ) /<p(L) subsets 
X of P(m, L) such that the product the elements of X is 1 modulo L. In 
other words, we expect 

log #C(m, L) « #P(m, L) log 2 - log p(L). 

Now, logL should be roughly my(l+e), so log</?(L) should be less than that 
same amount. It follows that we should have log #C(m,L) S> y 1+e ^ 2 , and 
so we expect to be able to find integers L for which #C(m, L) is a large as 
we like. 

4. Constructing Carmichael numbers of order 2 

The argument given in Section ||| suggests a method for finding Carmichael 
numbers of order m: Find a value of L for which #P(m, L) log 2 — log <p(L) is 
large, and then search for subsets of P(m, L) the products of whose elements 
are 1 modulo L. Only about 1 out of every tp(L) subsets of P(m, L) will 
have the desired property, so if L is too large we will have trouble finding 
such subsets. If m is greater than 2, we must take L to be extremely large 
in order for our heuristics to predict that C(m,L) is nonempty, so examples 
of Carmichael numbers of order 3 or more seem to be out of reach for the 
moment. However, as we will show in this section, it is possible to use the 
above method to find Carmichael numbers of order 2. 

Let us define the fecundity of a number L to be F(L) = #P(2, L) — 
(log (p(L))/ log 2, so that we expect C(2,L) to contain about 2 F ( L > elements. 
When L does not have too many divisors, one can compute the set P(2, L) 
naively by listing the divisors d of L and searching for those d such that 
d+ 1 is the square of a prime. We computed F(L) by this method for many 
L built up of primes less than or equal to 37, and we found several L with 
positive fecundity. For example, let 

Li = 2 7 • 3 3 • 5 2 • 7 • 11 • 13 • 17 • 19 • 29 

and 

L 2 = 2 7 • 3 3 • 5 2 • 7 • 11 • 13 • 17 • 19 • 29 • 31. 

Then #P(2,Li) = 45 and #P(2,L 2 ) = 58, so that F(L{) » 8.039 and 
F{L 2 ) w 16.132. 

We used a "meet-in-the- middle" approach to find the elements of C(2, L\), 
using the mathematics package MAGMA on one 195-MHz MIPS R10000 
IP27 processor of a Silicon Graphics Origin 2000 computer. In particular, 
we divided the set P(2,L\) into three disjoint subsets Si, S2, and S3 with 
#£1 = #<S2 = 19 and #63 = 7, and for each i = 1,2,3 we let rrij be 
the product of the primes in £j. We calculated the set X of multiplicative 
inverses of the residues (modulo L\) of the 2 19 divisors of mi and the set 
Y of the residues (modulo L\) of the 2 19 divisors of m.2. For every one of 
the 2 divisors d of 1713 we calculated the set Yd = {dy : y € Y}. For every 
element x in the intersection X n Yd, we found all divisors e of m\ such 
that e = x~ l mod L\ and all divisors / of r«2 such that df = x mod Li. 
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For each such triple (d, e, f) the product def is congruent to 1 modulo 
Li, and so is an element of C(2,Li) (unless d = e = f = 1). We found 
that #C(2, L\) = 246, whereas our heuristic argument suggested that there 
would be approximately 2 F ^ Ll ' 1 ~ 263 elements in this set. The two elements 
of C(2, L±) with the smallest number of prime divisors are 

31 • 37 • 101 • 103 • 109 • 199 • 419 • 449 • 521 • 571 • 911 • 2089 • 2551 • 5851 • 11969 

and 

41 • 67 • 79 • 181 • 199 • 233 • 239 • 307 • 449 • 521 • 1217 • 1871 • 4159 • 5851 ■ 9281. 

We used a similar method to construct elements of C(2, L2). We divided 
the set P(2, L2) into the set S\ of its smallest 20 members, the set S2 of 
the 20 smallest elements not in Si, and the set S3 of the remaining 18 
elements, and we defined mi as before. We expect that there are about 
2 F(L 2 ) w 2 i6.i32 e i ements in C(2,L 2 ), so we expect that for every 4 divisors 
d of 7773 we should find one element in X n Y^. This expectation is borne 
out by experimentation. For example, of the 18 prime divisors of 771,3, f° ur 
give rise to Carmichael numbers of order 2; these Carmichael numbers are 

23-43-59-61-79-89-113-13M5M91-307-311-373-419-433-463-701-1217-2551, 
23-53-59-79-89-101-109-113-131-181-199-233-307-349-433-701-911-1217-4523, 

61 • 67 • 71 • 89 • 101 • 103 • 113 • 151 • 181 • 191 • 199 • 233 

• 239 • 271 • 307 • 419 • 463 • 521 • 571 • 701 • 911 • 5279, 

and 

41 • 43 • 53 • 61 • 89 • 103 • 113 • 151 • 191 • 311 • 349 

• 373 • 419 • 433 • 463 • 521 • 571 • 701 • 929 • 15313. 

5. Examples of non-rigid Carmichael numbers 

Let m be a positive integer. Recall that we defined a rigid Carmichael 
number of order m to be a positive composite integer n for which x 1— > x n is 
the identity map on every finite etale Z/nZ-algebra that can be generated 
as a Z/nZ-module by m elements. Using arguments like those in the proof 
of Theorem |], one can show that a positive integer n is a rigid Carmichael 
number of order 777 if and only if 77 is a squarefree composite integer such 
that n = 1 mod (p r — 1) for every r with 1 < r < m and for every prime 
divisor p of n. 

We see that every element of the set C(m,L) from Section || is a rigid 
Carmichael number of order 777. It is natural to ask whether all Carmichael 
numbers of order 777 are also rigid Carmichael numbers. The answer is no; 
we prove this by producing several Carmichael numbers n of order 2 each 
having a prime divisor p with n ^ 1 mod (p 2 — 1). 

Let Lq be a positive integer and let po be a prime number that does not 
divide Lq and such that gcd(Lo,Po — 1) divides po — 1. Let P(2,Lq) be as 
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in Section ^, and let C(2, Lq,pq) denote the set of integers of the form pqUq, 
where no is a squarefree integer, all of whose prime factors lie in P(2, Lq), 
such that uq = 1 mod (p^ — 1) and pqUq = 1 mod Lq. (Our assumption 
on gcd(Lo,j»o ~~ 1) ensures that such no are not barred from existence by 
congruence conditions.) Then for every n in C(2, Lq,pq) and every prime 
divisor p of n we have 

{1 mod (p 2 — 1) if p pq 
p mod (p 2 — 1) if p = pq. 

Since such an n is squarefree, Theorem [l] shows that it is a Carmichael 
number of order 2, but it certainly is not a rigid Carmichael number of 
order 2. 

If Lq and po are as above, let L be the least common multiple of Lq 
and Pq — 1. Heuristics as in Section || indicate that we should expect there 
to be about 2* p ( 2 ' L °'> /(p(L) elements in the set C(2,L ,po). 

For example, suppose we take Lq to be 2 7 • 3 3 • 5 2 • 7 • 11 • 13 • 17 • 19 ■ 29 • 31 
(the number called L2 in Section ^]), and suppose we let pq = 1153 (the 
smallest prime that does not divide Lq and that satisfies the gcd condition 
mentioned above). Since #P(2,Lq) = 58 and log ^p(L)/ log 2 f» 52, we 
expect there to be about 64 integers in C(2, Lq,pq). We used a slightly 
modified version of the technique described in the preceding section to search 
for elements of C(2, Lq,pq). (We chose the subsets S\ and S2 of P(2,Lq) so 
that they each contained only quadratic residues modulo 5 — this allowed 
us to immediately disregard those divisors of that are quadratic residues 
modulo 5, since we were trying to find a divisor of m\m2mz that is congruent 
modulo L to a quadratic nonresidue modulo 5.) We found there to be 53 
elements in C(2, Lq,pq); the smallest of these is 

23 • 67 • 71 • 89 • 109 • 113 • 191 • 199 • 233 • 239 • 271 • 307 • 373 

• 419 • 521 • 911 • 929 • 1153 • 1217 • 1429 • 2089 • 2729 • 23561, 

and the largest is 

23 • 37 • 43 • 53 • 59 • 61 • 67 • 71 • 89 • 103 • 109 • 113 • 131 • 181 • 191 • 199 • 239 • 271 
• 311 • 373 • 379 • 419 • 433 • 463 • 521 • 683 • 701 • 911 • 929 • 991 • 1153 • 1429 
• 2089 • 2551 • 3191 • 4159 • 5279 • 11969 • 15809 • 23561 • 23869 • 244529. 
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